Plugin icon

Photo Engine (Media Organizer & Lightroom)

wplr-sync

Vulnerabilities:

4

Last Updated:

May 7, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-03-20
Title
Photo Engine (Media Organizer & Lightroom) < 6.5.0 - Authenticated (Author+) Arbitrary File Upload
Fixed in
Fixed in 6.5.0
CVSS
7.2 (high)
Published
2025-07-30
Title
Photo Engine < 6.4.4 - Cross-Site Request Forgery
Fixed in
Fixed in 6.4.4
CVSS
4.3 (medium)
Published
2024-08-16
Title
Photo Engine < 6.4.1 - Missing Authorization
Fixed in
Fixed in 6.4.1
CVSS
4.3 (medium)
Published
2024-08-01
Title
Photo Engine < 6.3.2 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
Fixed in 6.3.2
CVSS
6.4 (medium)